EO
Product
eosphoros-ai/db-gpt
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 4Medium 0Low 0
Watch
Add eosphoros-ai/db-gpt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10901 | 9.8 | Mar 20 | Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt Affected: through latest |
| CVE-2024-10835 | 9.8 | Mar 20 | Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt Affected: through latest |
| CVE-2024-10902 | 9.8 | Mar 20 | Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt Affected: through latest |
| CVE-2024-10834 | 9.1 | Mar 20 | Arbitrary File Write in eosphoros-ai/db-gpt Affected: through latest |
| CVE-2024-10833 | 9.1 | Mar 20 | Arbitrary File Write in eosphoros-ai/db-gpt Affected: through latest |
| CVE-2024-10831 | 9.1 | Mar 20 | Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt Affected: through latest |
| CVE-2024-10830 | 8.2 | Mar 20 | Path Traversal in eosphoros-ai/db-gpt Affected: through latest |
| CVE-2025-0452 | 8.2 | Mar 20 | Arbitrary File Deletion in eosphoros-ai/DB-GPT Affected: through latest |
| CVE-2024-10906 | 8.1 | Mar 20 | Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt Affected: through latest |
| CVE-2024-10829 | 7.5 | Mar 20 | Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt Affected: through latest |
Showing 10